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DETAILED ACTION 



1. 



Claims 1-13 are pending in the application. 



Specification 



2. 



The disclosure is objected to because of the following informalities: 



a. 



Page 10, lines 4-5- "filer" should read —filter— 



The entire specification should be revised. 



Claim Rejections - 35 USC § 101 



3. 



35 U.S.C. 101 reads as follows: 



Whoever invents or discovers any new and useful process, machine, manufacture, or composition of matter, or 
any new and useful improvement thereof, may obtain a patent therefor, subject to the conditions and 
requirements of this title. 



4. Claims 1, and 3-13 are rejected under 35 U.S.C. 101 because the claimed invention is 
directed to non-statutory subject matter. 

Claims 1, and 3-13 are directed to method steps which can be practiced mentally in 
conjunction with pen and paper, therefore they are directed to non-statutory subject matter. 
Specifically, as claimed, it is uncertain what performs each of the claimed method steps. The 
claimed steps do not define a machine or computer implemented process [see MPEP 2106]. 
(The examiner suggests applicant to change "method" to "computer implemented method" in the 
preamble to overcome the outstanding 35 U.S.C. 101 rejection). 



Application/Control Number: 10/092,646 Page 3 

Art Unit: 2126 

Claim Rejections - 35 USC § 112 

5. The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the 
subject matter which the applicant regards as his invention. 

6. Claims 1-13 are rejected under 35 U.S.C. 1 12, second paragraph, as being indefinite for 
failing to particularly point out and distinctly claim the subject matter which applicant regards as 
the invention. 

a. The following terms lacks antecedent basis: 

i. The method - claim 1 , line 1 . 

ii. The domain tree boundaries, said directory service- claim 1, lines 
1 1 and 15; claim 2, lines 26 and 29. 

hi. The policy data- claim 1 1 . 

b. The following claim language is indefinite: 

i. As per claim 1, line 10, it is uncertain what "capable of means (i.e. does 
the component have other capabilities? The examiner suggest applicant to replace 
"capable of to "for" to overcome the outstanding 35 U.S.C. 1 12 rejection). 

ii. As per claim 1, lines 7 and 9, it is uncertain what "human-readable form" 
means (i.e. what's human-readable and what's not?) 

iii. As per claim 2, this claim is rejected for the same reasons as claim 1 
above. 
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iv. As to claim 13, it is uncertain whether "back up components" refers to "a 
component for backing up and restoring a single or plurality of directory service 
objects" in claim 1. 



Claim Rejections - 35 USC §103 

7. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

8. Claims 1-13 are rejected under 35 U.S.C. 103(a) as being unpatentable over Boswell, 
("Inside Windows 2000 Server", published 12/22/1999), in view of Sanghvi et al (hereafter 
Sanghvi) (U.S. PGPub 20020095524A1). 

9. As to claim 1, Boswell teaches the invention substantially as claimed including: 
providing a component for backing up and restoring a single or plurality of directory 

service objects [Chap. 11, Backing Up the Directory, pg. 1; Performing Directory Maintenance, 
pg. 10 section Performing an Authoritative Directory Restoration] (i.e.... backing up the registry 
and the Active Directory. . .restore Directory operation by soft recovery. . .restore from backup 
tape...); 

providing a component for delegating security privileges to permit access to directory 
service objects [Chap. 10, Overview of Directory Security, pg. 13 section Access Rights 
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Delegation] (i.e.... Windows 2000 uses delegation to assign the right mix of access 
permissions. . .select the object types over which the security principal will exercise control. . .); 

providing a component for retrieving data in policy storage format and representing said 
data in human-readable form [Chap. 16, Managing User Environments with Group Policies, pg. 

I, line 5; Chap. 6, Configuring Security Policies, pg. 4 section Group Policy Editor Overview; 
Fig. 6.3]; 

providing a component having a graphical user interface including a display capable of 
displaying policy storage data in human readable form [Chap. 6, Configuring Security Policies, 
Fig. 6.3] (i.e. Group Policy Console...); 

providing a component capable of replicating a single or plurality of directory service 
objects across the domain tree boundaries of said directory service [Chap. 11, Replication 
Overview, pg. 5 Intrasite Replication Summary] (i.e. properties in the GC are replicated to every 
GC server in every domain in the forest). 

10. Boswell does not specifically teach providing a component for analyzing the effect a 
particular setting will have on a particular target represented as a directory service object before 
the setting is added to said directory service. However, Sanghvi teaches testing policies before 
applying the policies to the target nodes [Sanghvi, paragraph 46, lines 3-4; 406, Fig. 5] 

II. It would have been obvious to one of an ordinary skill in the art at the time the invention 
was made, to have combined the teaching of Boswell with the teaching of Sanghvi because the 
teaching of Sanghvi would provide an error prevention/detection mechanism that tests the effect 
of policies before they are actually implemented on the target. 



Application/Control Number: 10/092,646 Page 6 

Art Unit: 2126 

12. Furthermore, Boswell as modified does not specifically teach searching and reporting 
policy storage data. However, Boswell disclosed a Group Policy console that enables users to 
find entries arrange in a tree structure [Chap. 6, Configuring Security Policies, pg. 5, lines 1-3; 
Fig. 6.3]. 

13. It would have been obvious to one of an ordinary skill in the art at the time the invention 
was made, to have included a searching capability for locating a specific policy data in the case 
where there is a large among of policy data in the database. 

14. As to claim 2, this is a system claim that corresponds to the method claim 1. Therefore, it 
is rejected for the same reason as claim 1 above. 

15. As to claims 3-5, Boswell teaches the invention substantially as claimed including 
wherein directory service objects include users, computers and printers [Chap. 8, Strategies for 
Upper-Level Designs, pg. 3 section Functional Overview of Windows 2000 Security Groups, 
line 8; Chap. 15, Moving Forward, line 3] (i.e.... Active Directory objects that represent security 
principals, such as users, computers... printer objects...). 

16. As to claim 6, this claim is rejected for the same reason as claims 3-5 above (Examiner's 
interpretation of "a directory service component with a descriptive parameter," as any directory 
service objects with attributes/properties/settings since the applicant did not preclude nor define 
this limitation). 
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17. As to claim 7, Boswell does not specifically teach wherein the back up component 
facilitates the storage of object settings, links to directory service objects, and security 
information regarding directory service objects. However, Boswell disclosed backing up the 
system state files which includes the Active Directory database, NTDS.DIT, and its associated 
log and checkpoint files, contents of the \SYSVOL directory, etc. [Chap. 11, Backing Up the 
Directory, pg. 1]. It would have been obvious to one of an ordinary skill in the art at the time 
the invention was made, to have recognized that attributes, information, or settings related to a 
directory service object have to be backed-up in order for the object to be restore to. its previous 
configuration. 

18. As to claim 8, this claim is rejected for the same reason as claim 1 above. 

19. As to claim 9, Boswell teaches the invention substantially as claimed including wherein 
various levels of security privileges can be delegated [Chap. 10, Overview of Directory Security, 
pg. 14-17 section Access Rights Delegation, Figs. 10.9-10.1 1]. 

20. As to claim 10, this claim is rejected for the same reason as claim 9 above. In addition, 
Boswell does not specifically teach wherein the levels of security privileges that can be delegated 
include the ability to configure only one or a plurality of administrative templates contained in 
the policy. However, Boswell disclosed modifying administrative templates [Chap. 16, 
Managing User Environments with Group policies, pg. 15, lines 4-9] and delegating extended 
rights [Chap. 10, Overview of Directory Security, pg. 16 section Delegating Extended Rights, 
lines 3-8]. It would have been obvious to one of an ordinary skill in the art at the time the 
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invention was made, to have recognized that granular delegation of security privileges can 
further relief the burden of the administrator (i.e. assigning some administrative rights to users 
without granting administrative privileges, as been considered by Boswell) without risking the 
security of an entire active directory. 

21. As to claim 1 1 , Boswell teaches the invention substantially as claimed including wherein 
the policy data is stored in a database [Chap. 6, Configuring Security Policies, pg. 11] (i.e. 
Security policies for a local machine are stored in the Security Editor database. . .). 

22. As to claim 12, Boswell teaches the invention substantially as claimed including wherein 
the database where policy data is stored is the registry [Chap. 6, Configuring Security Policies, 
pg. 12, lines 6-7]. 

23. As to claim 13, this claim is rejected for the same reason as claims 3-6 above. 
(Examiner's interpretation of "back up components," as network objects with back up 
capabilities since the applicant did not preclude nor define this limitation). 

24. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Qing-Yuan Wu whose telephone number is (571) 272-3776. The 
examiner can normally be reached on 8:30am-5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Meng-Ai An can be reached on (571) 272-3756. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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